New article on SecurityFocus: Open source security testing methodology interview with Pete Herzog

["Erin Carroll" <amoeba () amoebazone com>]

The following interview was published on SecurityFocus today:

Open source security testing methodology interview by Federico Biancuzzi
2006-03-29

Truth is made of numbers. Following this golden rule, Federico Biancuzzi
interviewed Pete Herzog, founder of ISECOM and creator of the OSSTMM, to
talk about the upcoming revision 3.0 of the Open Source Security Testing
Methodology Manual. He discusses why we need a testing methodology, why use
open source, the value of certifications, and plans for a new vulnerability
scanner developed with a different approach than Nessus.

http://www.securityfocus.com/columnists/395


--
Erin Carroll
Moderator
SecurityFocus pen-test list
"Do Not Taunt Happy-Fun Ball" 

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.3.3/296 - Release Date: 3/29/2006
 


------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security? 
As attacks through web applications continue to rise, you need to proactively 
protect your applications from hackers. Cenzic has the most comprehensive 
solutions to meet your application security penetration testing and 
vulnerability management needs. You have an option to go with a managed 
service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). 
Download FREE whitepaper on how a managed service can help you: 
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm your 
results from other product. Contact us at request () cenzic com
------------------------------------------------------------------------------